Skip to content
View mangrisano's full-sized avatar
39 followers · 70 following

Achievements

Achievement: Mars 2020 ContributorAchievement: Arctic Code Vault ContributorAchievement: Pull Shark

Achievements

Achievement: Mars 2020 ContributorAchievement: Arctic Code Vault ContributorAchievement: Pull Shark

Block or report mangrisano

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mangrisano/README.md

Hi 👋 I'm Michele Angrisano

Software Engineer — Authentication & PKI

I build security software in Python, C++ and TypeScript that ships to production. I care about clean design, algorithms, and systems that hold up under real load.

The same PKI / TLS expertise runs through everything I do — from FIDO2 and X.509 in the product I work on to the open-source tooling I build around certificate inspection, monitoring and the TLS lifecycle.

🔐 What I work on

Namirial SafeAccess — a passwordless, phishing-resistant MFA suite for enterprises, built on FIDO2 and PKI, securing access to Windows workstations and web/legacy apps.

  • Built core parts of the Python backend and native Node/C++ modules powering passwordless login on enterprise workstations.
  • Designed and shipped TypeScript modules for the web/integration layer.
  • Work hands-on with PKI, X.509 and the TLS/SSL certificate lifecycle.

Beyond the product, I build enterprise backends in Python / FastAPI — including SOAP integrations and services around remote signing and Certificate Authority (CA) infrastructure.

📦 Open source

I build and ship my own tooling — small, focused, production-grade.

certinspect — X.509/TLS certificate inspector: expiry, chain of trust, OCSP/CRL revocation, weak crypto and hostname match, with text/JSON/CSV/Nagios/Prometheus output.

certminder — continuous TLS certificate monitor & alerter built on certinspect: scheduled checks, dedup and notifications (console / email / Slack / webhook).

cvewatcher — self-hosted FastAPI service that matches your software inventory against the NIST NVD, with background monitoring and a web dashboard.

jpick — tiny jq-like JSON query tool written in C++20.

gaze — small file-watcher CLI in Go that re-runs a command whenever watched files change, like entr/watchexec.

🛠️ Tech I reach for

  • Languages: Python · C++ · Go · TypeScript · Node.js
  • Backend: FastAPI · Django · django-ninja-aio-crud · SOAP · REST · microservices
  • Infra & data: Docker · Linux · PostgreSQL · Redis
  • Domain: PKI · X.509 · ASN.1 · TLS/SSL · client-cert auth · PKCS#12 · JOSE/JWT · FIDO2 · WebAuthn · remote signing · CA

🔭 Currently

On the open-source side, I keep building and maintaining my own certificate-lifecycle tooling — TLS/PKI inspection, monitoring and revocation — plus small focused utilities that scratch my own itch.

❤️ Support my work

If my open-source tooling saves you time, you can support its continued development through GitHub Sponsors.

Sponsor Follow

Happy to talk about PKI, security tooling and backend systems — reach out on LinkedIn or by email.

Pinned Loading

  1. certinspect certinspect Public

    Command-line TLS certificate inspector

    Python 2

  2. certminder certminder Public

    Continuous TLS certificate monitor and alerter built on top of certinspect

    Python 2

  3. cvewatcher cvewatcher Public

    A FastAPI-based application for monitoring and tracking CVE.

    Python 2

  4. jpick jpick Public

    A tiny jq-like JSON tool written in C++20

    C++ 3

  5. gaze gaze Public

    A file-watcher CLI: re-runs a command whenever watched files change (like entr/watchexec). Go.

    Go